Key Exchange Method
Secure Remote Password (SRP)
The Transport Layer Security Secure Remote Password
[502] cipher suite
[471][472]s provide secure communication by establishing key exchange
[467] based on one or more party's knowledge of a password, using a Secure Remote Password
[391][392][393] which is an augmented Password-authenticated key agreement
[415][416] protocol. Some cipher suites verify authenticity
[201][202][203] of the parties only by SRP while others use it together with public-key cryptography
[346][347][348]. The algorithm is considered secure
[282][283], but leading client applications do not use this algorithm. Unless your application or requirements specifically call for their use, it is generally safer to avoid cipher suites that are not adopted and supported by a critical mass of the industry.
Recommendations
If your application or requirements specifically call for the use of algorithms which are not used by the leading client applications set the cipher suite order explicitly and cipher suites used by the leading client applications be preferred over the ones which do not used by them.